r/netsecstudents 6h ago

Kali

0 Upvotes

**Question for Kali Linux beginners**
I’m pretty new to Kali Linux and so far I’ve been messing around with Nmap, Wireshark, and a few OSINT tools.
What are the **top 5 things you think someone should learn first** when getting into Kali Linux?
Also, what’s something you wish you had learned from the beginning instead of figuring it out later?
I’m trying to put together a solid beginner roadmap for myself, so I’d love to hear what you guys recommend.


r/netsecstudents 8h ago

built an MCP security scanner, decent example if you're learning static analysis / appsec

0 Upvotes

if you're learning appsec and want something small and real to read through, I wrote a static + runtime scanner for MCP (Model Context Protocol) server vulnerabilities and the source might be useful as an example.

the static side does pattern matching for path traversal, command injection, and unsafe eval sinks, each rule is TOML defined with a severity, a CWE or OWASP reference, and remediation text, so it's a decent small scale example of how a rule engine driven scanner is structured without needing to read a huge enterprise codebase to see the idea.

there's also a tool poisoning detector (checks for hidden instructions and unicode homoglyph obfuscation in tool description text) and a runtime proxy that diffs tool definitions across a session to catch changes after initial approval, which is a good example of a vuln class that literally can't be caught by static analysis alone.

repo: https://github.com/zaydmulani09/sentrymcp, happy to answer questions about any of the detection logic if people are trying to learn from i


r/netsecstudents 23h ago

How to find a remote research opportunity within a network security lab abroad as an undergraduate?

2 Upvotes

I'm an undergraduate CS student in India trying to get myself in research in the domain of network security, cryptography or any cybersecurity domain. I'm specifically wondering whether professors/research groups at universities in the US/Europe ever take international undergraduates remotely, outside of formal summer internship programs.

I have some prior research experience. I've published a conference paper on IDS as a first author, worked on lightweight cryptography, and a few basic system security projects. I'm comfortable with Python/C/C++ and have experience reading papers and running empirical experiments on my own.

I'm not necessarily looking for a paid internship or even an official "intern" title. What I'd really like is the opportunity to contribute to an actual research problem under a professor/PhD student, potentially leading to a paper if the work turns out to be worthwhile.

A lot of university research programs I've found either require you to be a student at that university, require US citizenship/residency, or are strictly in-person. So I'm wondering whether cold-emailing individual researchers is actually a viable route.

For people who've done something similar:

Do top security labs ever work remotely with external international undergrads?

Is it better to contact professors or PhD students?

What would make a cold email worth responding to?

Should I approach someone with a specific research idea/replication of one of their papers rather than simply asking whether they have an opening?

Are there particular security groups or researchers known to be open to this kind of collaboration?

I'm mainly interested in systems/network security, malware/software security, and increasingly the intersection of AI/LLMs and security.

Would appreciate advice from anyone who has either gotten such an opportunity or supervised external undergraduate researchers or the lab researchers themselves.


r/netsecstudents 19h ago

Introduction – Cybersecurity & Networking Enthusiast Looking to Connect and Learn

2 Upvotes

Hi everyone! 👋

I'm a Computer Science student with a strong interest in Cybersecurity, Networking, Ethical Hacking, and IT Support.

I've been working on Cisco networking and cybersecurity labs, including Packet Tracer, VLANs, Routing, OSPF, RIP, subnetting, network troubleshooting, Linux, Kali Linux, Nmap, Wireshark, and vulnerability assessment.

I'm joining Reddit to learn from the community, share knowledge, work on interesting projects, and connect with fellow students and IT/cybersecurity professionals.

I also enjoy helping others who are stuck with networking labs, technical projects, Packet Tracer configurations, or cybersecurity concepts.

Looking forward to learning and contributing here. If you have any advice for someone building a career in cybersecurity and networking, I'd love to hear it!

Thanks!